Privacy policy

Voxa is run by [confirm: legal entity name, registered address and data protection contact]. This page explains what we collect when you use the service and why.

We collect the information needed to run your account and the service:

• Account details: your name and email address, and the workspaces and roles you belong to.
• Call and text records: the numbers involved, the time, the duration and the cost. [confirm: whether message content is stored and for how long]
• Credit history: every purchase and every charge, so a balance can be explained.
• Identity verification details when you buy a phone number. [confirm: what is collected and which provider handles it]
• Technical data: your IP address and device details, used for security and to limit abuse.
• Where you came from: when you sign up we record campaign tags in the link (such as utm_source) and the website that sent you.

To provide calls, texts, numbers and eSIMs, to bill you correctly, to keep accounts secure, to prevent fraud, to answer support requests and to meet legal duties. [confirm: legal basis for each use]

We use a small number of cookies, all needed for the site to work:

• Sign-in cookies (httpOnly): keep you signed in. Scripts on the page cannot read them.
• A security cookie: protects forms and requests from forgery.
• A workspace cookie: remembers which workspace you last used.
• A theme cookie: remembers light, dark or system.
• Local storage: remembers small interface choices such as dismissed notices and your last country.
• [confirm: that no analytics or advertising cookies are used, or list them]

We share data with the providers that make the service work: carriers for calls and texts, number and eSIM providers, a payment provider, an identity verification provider and hosting. [confirm: names of providers and what each receives]

We do not sell your personal data. [confirm: wording on sale and sharing for advertising]

[confirm: countries where data is stored and processed, and the safeguards for transfers]

[confirm: retention period for each kind of data, including call records and the audit log]

Sessions use httpOnly cookies, traffic uses HTTPS, and our API checks your role on every action. Workspace owners and admins can read an audit log of changes. No system is perfectly secure, so we cannot promise absolute protection.

[confirm: rights to access, correct, delete and export data, by jurisdiction, and how to use them]

[confirm: minimum age and how children's data is handled]

[confirm: how and when we tell you about changes]

Privacy questions: support@voxa.example.